Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

Virus.Hija...b6.exe

windows7-x64

3

Virus.Hija...b6.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Virus.Hijack.ATA_virussign.com_e2661228492b44cefb94e7e7629107b6.exe

  • Size

    49KB

  • Sample

    240907-p47vzaxbmj

  • MD5

    e2661228492b44cefb94e7e7629107b6

  • SHA1

    aaa70c7765f603134627aac1d43a7f9f0b6508f6

  • SHA256

    53d0fa26b1e75584042464c021c3609a916d53d6f3e4b7cbd23c78737f1005ba

  • SHA512

    a9115ceeb882fa353d1a22ab14f8a7d8c674e2cba8012722b2eda3eed8f3d2e779231837837089fce4998f39b97f6351aa725122da1a7d0b8bcc4d8c147cebd9

  • SSDEEP

    768:Eacrn8w1kRJLjxGfRz8tw8ru2LfF7i9vEhv/YeHnLSYpZvA7Pu/CCR2/1H5Ex2XP:EacTD1kR9xDt5RfFu9GHLSYf6hCuiyl

Score
10/10
discoverypersistence

Malware Config

Targets

    • Target

      Virus.Hijack.ATA_virussign.com_e2661228492b44cefb94e7e7629107b6.exe

    • Size

      49KB

    • MD5

      e2661228492b44cefb94e7e7629107b6

    • SHA1

      aaa70c7765f603134627aac1d43a7f9f0b6508f6

    • SHA256

      53d0fa26b1e75584042464c021c3609a916d53d6f3e4b7cbd23c78737f1005ba

    • SHA512

      a9115ceeb882fa353d1a22ab14f8a7d8c674e2cba8012722b2eda3eed8f3d2e779231837837089fce4998f39b97f6351aa725122da1a7d0b8bcc4d8c147cebd9

    • SSDEEP

      768:Eacrn8w1kRJLjxGfRz8tw8ru2LfF7i9vEhv/YeHnLSYpZvA7Pu/CCR2/1H5Ex2XP:EacTD1kR9xDt5RfFu9GHLSYf6hCuiyl

    Score
    10/10
    discoverypersistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Executes dropped EXE

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks